Information Security Magazine

The recently discovered Embargo ransomware group is using Rust-based custom tools to overcome victims’ security defenses, ESET researchers have observed

Former UK PM David Cameron called for stronger defenses against Chinese cyber espionage while advocating collaboration with Beijing, coinciding with the BRICS Summit

70% of leaders see cyber knowledge gap; AI attacks are harder to detect, 60% expect more victims

While Internet Archive’s services slowly resume, the data breach reveals the non-profit’s security failures

The US government has issued guidance for federal agencies on the use of Traffic Light Protocol, designed to boost intelligence sharing with the cybersecurity community

The British Minister for Security Dan Jarvis said at Recorded Future’s Predict 2024 that the new government was considering reforming the 1990 legislation

45% of security breaches in the energy sector in the past year were third-party related, according to a report by Security Scorecard and KPMG

Cloud attacks surged in 2024 as attackers exploited cloud resources at unprecedented levels

Four current and former publicly trading tech companies have agreed to pay civil penalties in relation to the SEC charges

75% of US Senate campaign sites lack DMARC, risking cybersecurity and email safety

A phishing attack targeting Transak employees led to a data breach, compromising the information of 92,554 users

Meta is testing facial recognition technology to tackle celeb-bait ad scams and enable the recovery of compromised accounts

RUSI and Chatham House recommended global standards to combat commercial cyber tool abuse

AI tools are being used to launch over half a million cyber-attacks daily on retailers, according to a new report

The cryptographic vulnerabilities were found in Sync, pCloud, Icedrive and Seafile by ETH Zurich

A threat actor claimed to get hold of an exposed GitLab configuration file containing Zendesk API access tokens

The August ransomware attack stole 50,000+ documents from Nidec, leaked after ransom refusal

The malware loader taken down by Europol in May 2024 could be back with a vengeance

Businesses in Australia must update their privacy policies with clear and transparent information about their use of AI, said the regulator

Long-lived credentials in the cloud put organizations at high risk of breaches, a report from Datadog has found